Ilovejackdaniels.com has posted the third part in their "Writing Secure PHP" series today.

In Writing Secure PHP and Writing Secure PHP, Part 2 I covered many of the basic mistakes PHP developers make, and how to avoid common security problems. It is time to get a little deeper into security though, and begin to tackle some more advanced issues.

In part three he talks about database field lengths, weak passwords, the issues surrounding clients (customers, not software), code injection, making plans to deal with "The Aftermath", and, of course, a look into everyones favorite low-security playground - shared hosting.